Platform & Infrastructure Engineer

BharatGen; Mumbai; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

BharatGen is seeking a Lead Platform & Infrastructure Engineer to own the complete infrastructure stack from bare-metal hardware to container orchestration and application delivery.

You will anchor architecture, automation, security, and day-to-day IT operations across virtualized and on‑prem environments, building a hardened Kubernetes cluster and driving CI/CD pipelines with zero-trust security in mind.

Qualifications

• Minimum 7+ years hands-on DevOps/SRE/Platform Engineering experience.
• Bachelor’s degree in CS/IT/related field or MCA.
• Experience with on-prem/private cloud and bare-metal infrastructure.

Responsibilities

• Build and operate production-grade bare-metal and virtualization stacks.
• Design and enforce IaC, configuration management, and GitOps practices.
• Develop secure, scalable Kubernetes clusters on self-managed infra.
• Implement zero-trust security, RBAC, encryption, and DR strategies.

Skills

Linux mastery

Bare-metal/private cloud

Self-hosted Kubernetes

Networking & security

Automation/IaC

GitOps workflows

Storage concepts

Education

B.Tech/B.E. in Computer Science/IT/MCA or related

Tools

Kubernetes

CSI drivers

CI/CD automation tools

Job description

We are looking for a highly skilled and hands-on Lead Platform & Infrastructure Engineer to take end-to-end ownership of our infrastructure, right from the bare-metal hardware and hypervisor layers up to container orchestration and application delivery.

In this role, you will act as the technical anchor for our architecture, automation, security, and day-to-day IT operations across virtualized and on-premise/bare-metal environments. You will be responsible for building a hardened, production-ready Kubernetes cluster from the ground up, implementing zero-trust network security, managing storage solutions, and driving automated CI/CD pipelines.

Key Responsibilities

Systems & Virtualization Engineering

• Provision, tune, and manage bare-metal hosts and Linux-based virtual machines (VMs).
• Drive the shift from manual configurations to declarative Infrastructure as Code (IaC) and configuration management.
• Perform L3 troubleshooting across physical servers, guest OS, and virtualized storage volumes.

Network Security & Access Management

• Architect, scale, and maintain secure mesh overlay networks and point-to-point VPNs.
• Implement least-privilege IAM policies, network micro-segmentation, and identity-aware routing across hosts, developer endpoints, and infrastructure tiers.
• Debug end-to-end network connectivity, routing partitions, MTU mismatches, and firewall/access control issues in hybrid setups.
• Design, bootstrap, secure, and operate high-availability (HA), production-grade Kubernetes clusters on self-managed infrastructure.
• Enforce strict InfoSec baselines: cluster RBAC, secret management/rotation, runtime security, admission controllers, and pod-to-pod network policies.
• Architect highly durable persistent storage solutions, integrate Container Storage Interface (CSI) drivers, and manage volume encryption, snapshots, and Disaster Recovery (DR).

Observability, Monitoring & SRE

• Deploy and scale a comprehensive, full-stack observability platform for metrics, distributed tracing, and centralized log aggregation.
• Instrument proactive alerting, health checks, and dashboards across hosts, hypervisors, and container workloads to drastically reduce MTTR.

CI/CD & DevSecOps Implementation

• Build, optimize, and maintain automated CI/CD pipelines for seamless delivery of both application and infrastructure code.
• Integrate automated security checkpoints (Shift-Left security), including container image scanning, vulnerability assessments, and policy-as-code validations.

Experience & Qualifications

• Educational Background: B.Tech/B.E. in Computer Science, IT, MCA, or related field.
• Core Experience: 7+ years of hands-on, progressive experience in DevOps, Systems Engineering, SRE, or Platform Engineering.

Required Skills

• Linux Mastery: Deep internal knowledge of Linux OS, kernel tuning, networking primitives, block devices, and file systems.
• Bare-Metal & Private Cloud: Proven capability in deploying, securing, and maintaining self-managed hypervisors and virtualization ecosystems natively (without reliance on public cloud managed services).
• Self-Hosted Kubernetes: Extensive hands-on experience bootstrapping and troubleshooting production-grade bare-metal/on-prem K8s clusters (managing control planes, etcd quorums, CNI plugins, CSI drivers, and Ingress).
• Networking & Security: Strong grasp of encrypted overlay networks, modern VPN protocols, SDN, and advanced firewalling. Practical experience with zero-trust architectures, mTLS, credential management, and workload isolation.
• Automation/IaC: Expert-level proficiency in automating infrastructure provisioning and configuration management.

Preferred Skills

• Prior experience setting up and managing GitOps-driven workflows for cluster and infrastructure lifecycle management.
• Hands-on expertise with configuring distributed, clustered, or networked storage backends for container ecosystems.